01Cyber Security & Zero Trust
Strategic & Technical Security Advisory
Comprehensive cybersecurity consulting for New Zealand and Australian enterprises. We align security posture with business risk, regulatory obligations (NZISM, PSR, ISO 27001, Essential Eight), and executive governance.
- Security posture review
- Regulatory control mapping
- Target security architecture
- Remediation roadmap
- Executive risk briefings
Explore service →02Identity & Access Management
Enterprise Identity Advisory & Operating Models
Senior advisory across workforce, customer, privileged, and partner identity. We design identity operating models, governance structures, and technology roadmaps that turn identity into a core business enabler.
- IAM strategy blueprint
- Identity operating model
- Current-state gap assessment
- Platform evaluation
- Multi-year investment roadmap
Explore service →03Identity & Access Management
Defensible Enterprise Identity Architecture
Enterprise and solution architecture for complex identity estates. We define source authority, synchronization topologies, authentication boundaries, federation standards, and least-privilege access models.
- High-level & detailed architecture
- Source authority matrix
- Federation & protocol designs
- Security control specifications
- Architecture decision records (ADRs)
Explore service →04Cyber Security & Assurance
Evidence-Based Security Maturity & Risk Reviews
Rigorous technical reviews of cloud estates, infrastructure boundaries, application environments, and security controls against recognized security standards, threat models, and regulatory baselines.
- Security maturity scorecards
- Threat & exposure analysis
- Prioritised remediation backlog
- Executive summary & technical findings
- Defensible audit evidence
Explore service →05Assurance & Assessments
Comprehensive Identity Maturity & Control Audits
Deep assessment of your complete identity estate—from Active Directory and Entra ID to lifecycle automation, role engineering, privileged accounts, and SaaS application integrations.
- IAM maturity matrix
- Identity risk register
- Dormant & orphan account analysis
- Lifecycle workflow evaluation
- Remediation action plan
Explore service →06Platform Packages & Managed
Hardened, Secure Managed Web Hosting
High-security managed cloud hosting in Microsoft Azure for business-critical websites, brochure portals, and lightweight applications with continuous patching, uptime monitoring, and hardening.
- Hardened Azure deployment
- Automated patching & maintenance
- SSL/TLS & DNS management
- Proactive uptime monitoring
- Monthly operational reporting
Explore service →07Platform Packages & Managed
Rapid Identity & Security Tenant Baseline
Turnkey tenant architecture and baseline hardening for Microsoft Entra ID. Establishes emergency break-glass procedures, core Conditional Access, MFA enforcement, and initial hygiene controls within weeks.
- Core Entra tenant setup
- Standard Conditional Access baseline
- MFA & basic phishing resistance
- Break-glass account procedures
- Initial health check & configuration guide
Explore service →08Platform Packages & Managed
Advanced Governance, PIM & Phishing Resistance
Extends foundational controls with Entra Privileged Identity Management (PIM), phishing-resistant passkey authentication, automated lifecycle workflows, entitlement management, and hybrid directory sync.
- Entra PIM & JIT activation
- FIDO2 / passkey rollout pilot
- Access packages & entitlement catalogs
- Automated JML workflows
- Hybrid directory synchronization & auditing
Explore service →09Platform Packages & Managed
Enterprise Transformation & Operational Transfer
Full-scale enterprise identity transformation designed for critical infrastructure, government, and large enterprises. Includes custom SCIM integrations, deep SIEM monitoring, runbooks, and hands-on team coaching.
- Comprehensive target architecture
- Custom SCIM & Graph connectors
- Sentinel & SIEM identity telemetry
- Complete operational runbooks
- Knowledge transfer & engineering coaching
Explore service →10Platform Packages & Managed
Long-Term Identity Stewardship & SLA Operations
Continuous, retained operational stewardship of your Microsoft Entra, IAM, and cloud security platform. Includes quarterly architecture reviews, proactive configuration maintenance, and guaranteed priority incident escalation.
- Quarterly architecture health reviews
- Proactive policy & sync maintenance
- Priority escalation & tier 2/3 engineering support
- Ongoing feature evaluation & adoption
- Audit & compliance evidence packages
Explore service →11Migration & Verification
Verifiable Credential & Decentralized Identity Solutions
Architectural design and production deployment of Microsoft Entra Verified ID, W3C Verifiable Credentials, OpenID4VCI, OpenID4VP, and DiligenceID integrations for tamper-evident digital onboarding and role attestation.
- Verified ID issuer & verifier setup
- Credential schema & display definitions
- Application & portal API integration
- Privacy impact & trust framework review
- Pilot validation & production cutover
Explore service →12Migration & Modernisation
Seamless Transition to Modern Customer Identity
Proven migration framework to transition complex customer and partner portfolios from legacy authentication systems and Azure AD B2C to next-generation Microsoft Entra External ID without user disruption.
- Tenant readiness assessment
- User store & attribute schema migration
- Custom authentication extensions
- Application redirection & token mapping
- Staged user cutover & communication plan
Explore service →13Migration & Modernisation
Controlled Retirement of Legacy Azure AD B2C
Safe, audited teardown and decommissioning of retired Azure AD B2C tenants. We verify data extraction, audit trail preservation, DNS and vanity domain migrations, dependency severing, and contract closure.
- Decommissioning checklist & risk gate
- Full user data extraction verification
- Custom policy & key archival
- DNS cutover & reverse-proxy retirement
- Formal completion certificate
Explore service →14Identity & Access Management
Customer Identity & Access Management Architecture
Design frictionless, secure consumer and citizen identity journeys. We balance user experience, privacy regulations, fraud prevention, social and enterprise federation, and self-service lifecycle management.
- Customer journey blueprints
- Passwordless & passkey customer auth
- Consent & progressive profiling model
- Federation architecture (OIDC/SAML)
- Self-service recovery & account linking
Explore service →15Identity & Access Management
Identity Governance & Administration
Make access explainable and removal routine. We deploy Microsoft Entra ID Governance, lifecycle workflows, automated access packages, periodic certification campaigns, and segregation of duties (SoD) policies.
- Joiner-Mover-Leaver automation
- Entitlement catalog & access packages
- Automated access certification reviews
- Segregation of Duties (SoD) matrices
- Auditable compliance reporting
Explore service →16Identity & Access Management
Privileged Access Management & Zero Standing Privilege
Eliminate standing administrative privileges across cloud and hybrid environments. We design administrative tiering (Tier 0 / Control Plane), break-glass procedures, session recording, and credential vaulting.
- Privilege discovery & exposure mapping
- Tier 0 administrative architecture
- Break-glass emergency procedures
- Hardened administrative workstation specs
- Privileged operations runbooks
Explore service →17Identity & Access Management
Microsoft Entra Privileged Identity Management
Configure and operationalise Microsoft Entra PIM for Entra roles, Azure resource roles, and PIM for Groups. Implement just-in-time (JIT) activation, mandatory justification, approval gates, and time-bound access.
- PIM role eligibility matrix
- Multi-stage approval workflows
- Activation duration & MFA policy
- PIM for Groups entitlement designs
- Activation telemetry & audit dashboards
Explore service →18Architecture & Leadership
Multi-Year Technology & Security Blueprints
Align enterprise technology, cyber security, and identity investments with executive business outcomes. We deliver prioritized, multi-phase transformation roadmaps grounded in practical delivery capacity.
- 3-to-5 year strategic technology blueprint
- Phased capability maturity roadmap
- Investment & licensing business cases
- Vendor & platform selection criteria
- Executive stakeholder consensus
Explore service →19Cyber Security & Assurance
Identity Breach Investigation & Forensic Analysis
Specialist incident response and forensic analysis for identity compromises, token replay attacks, unauthorized privilege escalation, and cloud tenant intrusions. Defensible evidence collection and rapid containment.
- Root cause analysis (RCA) report
- Attack timeline & blast radius reconstruction
- Forensic evidence chain of custody
- Remediation & containment guidance
- Post-incident hardening roadmap
Explore service →20Cyber Security & Assurance
Identity & Cloud-Focused Penetration Testing
Offensive security testing focused on identity attack paths, Entra ID misconfigurations, hybrid privilege escalation, web applications, and API security. Real-world adversary simulation without operational damage.
- Executive risk summary
- Technical vulnerability report
- Reproducible attack chains (PoC)
- Prioritised remediation instructions
- Post-remediation verification testing
Explore service →21Architecture & Leadership
Executive Technical & Security Leadership on Demand
Senior fractional CTO and CISO expertise for high-growth firms, enterprise modernization programmes, and government agencies. We take ownership of technical strategy, governance, architecture, and board reporting.
- Technical steering & design authority
- C-suite & board risk reporting
- Architecture review board (ARB) leadership
- Vendor negotiation & technical oversight
- Engineering team mentoring
Explore service →22Cyber Security & Zero Trust
Pragmatic Zero Trust Security Architecture
Architect defensible security boundaries based on the core Zero Trust principles: verify explicitly, use least-privilege access, and assume breach. Micro-segmentation, software-defined perimeters, and continuous validation.
- Zero Trust architecture blueprint
- Micro-segmentation & trust boundaries
- Continuous verification policy designs
- Data classification & egress controls
- Zero Trust maturity roadmap
Explore service →23Identity & Access Management
Microsoft Entra Tenant Design & Modernisation
End-to-end design and optimization of your Microsoft Entra ID tenant. We configure authentication strengths, Conditional Access policies, external collaboration, workload identities, and operational telemetry.
- Tenant architecture blueprint
- Conditional Access policy matrix
- Workload identity federation
- Cross-tenant access policies
- Operational monitoring & alert rules
Explore service →24Identity & Access Management
Active Directory & Entra Hybrid Synchronisation
Engineering and modernisation of hybrid directory infrastructures. We deploy Entra Connect and Cloud Sync, manage source authority, resolve synchronization loops, and manage Exchange identity dependencies.
- Hybrid directory topology design
- Entra Cloud Sync deployment
- Attribute mapping & filtering rules
- Password hash sync & writeback setup
- Staging & cutover validation
Explore service →25Identity & Access Management
Phishing-Resistant FIDO2 & Passkey Rollout
Replace vulnerable passwords and SMS MFA with phishing-resistant passkeys and FIDO2 security keys. We engineer the complete lifecycle: registration, bootstrap with TAP, device binding, and safe recovery.
- Passkey strategy & cohort planning
- Authentication strength policies
- Bootstrap & Temporary Access Pass (TAP) flows
- Account recovery & lost-device runbooks
- Pilot execution & rollout support
Explore service →26Identity & Access Management
Standards-Based SSO, SCIM & API Integration
Seamlessly integrate SaaS, custom, and legacy applications into your identity control plane using OIDC, OAuth 2.0, SAML 2.0, SCIM 2.0 automated provisioning, and custom Microsoft Graph connectors.
- Application onboarding architecture
- SCIM automated provisioning endpoints
- SAML/OIDC SSO configurations
- API token & scope authorization models
- Deprovisioning reconciliation tests
Explore service →27Cyber Security & Architecture
Identity-Centric Azure Workload & Platform Hardening
Protect Azure cloud environments with identity-first guardrails. We implement managed identities, Key Vault HSMs, Azure Policy guardrails, Defender for Cloud, and private network perimeter architectures.
- Azure security landing zone baseline
- Managed identity migration plan
- Key Vault & secret management policy
- Azure Policy governance definitions
- Sentinel & Defender integration
Explore service →28Migration & Verification
Decentralized Trust Models & Reusable Evidence
Design sovereign, privacy-preserving digital identity ecosystems using verifiable credentials, digital wallets, selective disclosure, and interoperable open standards (W3C VC 2.0, SD-JWT, ISO 18013-5).
- Digital trust ecosystem architecture
- Credential schema & lifecycle designs
- Issuer, holder, verifier trust models
- Privacy impact assessment (PIA)
- Standards interoperability profile
Explore service →29Migration & Verification
Enterprise Verifiable Credential Platform
MAITS' proprietary digital credential product enabling instantaneous verification of qualifications, licenses, authority, and identity evidence directly from user devices without third-party surveillance.
- DiligenceID platform licensing
- Rapid verification widget integration
- Custom credential issuance templates
- Hardware-bound wallet attestation
- Audit-ready verification logs
Explore service →30Assurance & Assessments
Rapid Diagnostic Review of Identity Security & Hygiene
A fast, structured diagnostic of your Microsoft Entra ID and Active Directory estate. We analyze tenant configuration, legacy protocols, privilege sprawl, and MFA coverage to uncover immediate vulnerabilities.
- Executive risk summary
- Technical scorecard across 6 domains
- Top 5 critical remediation priorities
- License utilization optimization
- Follow-up briefing with Lead Architect
Explore service →31Architecture & Leadership
Flexible Specialist Access & Design Authority
On-demand specialist consulting hours or recurring monthly advisory retainers. Gain direct, responsive access to senior identity architects and security engineers without the overhead of fixed-scope contracts.
- Dedicated monthly advisory capacity
- Rapid design reviews & ADR sign-offs
- Emergency troubleshooting escalation
- Vendor statement of work (SOW) reviews
- Ongoing architecture steering
Explore service →32Assurance & Training
Tailored Stakeholder Alignment & Engineering Uplift
Facilitated alignment workshops and in-depth technical training for executive teams, architects, and engineering squads across Zero Trust, Entra ID, passkeys, RBAC engineering, and digital credentials.
- Customized workshop curriculum
- Facilitated decision & alignment sessions
- Practical engineering lab exercises
- Architecture decision documentation
- Post-session capability action plan
Explore service →33Assurance & Training
Independent Technical Verification & Readiness Gates
Independent third-party assurance of identity and security programmes delivered internally or by third-party systems integrators. We verify technical quality, control completeness, and operational readiness.
- Independent architecture assurance review
- Design vs build traceability audit
- Control effectiveness test validation
- Production cutover readiness assessment
- Defensible assurance report for Steering Committee
Explore service →34Platform & Digital Services
Modern Website Design, Managed Hosting & Digital Experience
MAITS designs, develops, hosts, secures and maintains modern websites and digital experiences for organisations of all sizes across New Zealand and Australia. Includes preferential rates for nonprofits via MAITS GoodWorks.
- Custom responsive web design & development
- Managed website hosting in Microsoft Azure
- CMS dependency updates & routine security patching
- Domain DNS assistance & TLS certificate lifecycle
- WCAG accessibility reviews & speed optimization
- Preferential charity rates via MAITS GoodWorks
Explore service →